“While each token’s legal status depends on its own facts and circumstances, the probability is quite remote that, with 50 or 100 tokens, any given platform has zero securities.”